[Secure-testing-commits] r16342 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2011-03-09 18:21:44 +0000 (Wed, 09 Mar 2011)
New Revision: 16342

Modified:
   data/CVE/list
Log:
postfix info

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-03-09 18:13:37 UTC (rev 16341)
+++ data/CVE/list	2011-03-09 18:21:44 UTC (rev 16342)
@@ -2349,10 +2349,15 @@
 	RESERVED
 CVE-2011-0411
 	RESERVED
+        TODO: lots of various other packages potentially affected, need to check them, see http://www.kb.cert.org/vuls/id/555316
 	- postfix 2.8.0-1
 	NOTE: http://www.securityfocus.com/archive/1/516901/30/0/threaded
 	NOTE: http://www.postfix.org/announcements/postfix-2.7.3.html
 	NOTE: http://www.postfix.org/CVE-2011-0411.html
+        - qmail <unfixed>
+        [lenny] - qmail <no-dsa> (non-free doesn't get security support)
+        [squeeze] - qmail <no-dsa> (non-free doesn't get security support)
+        NOTE: http://www.kb.cert.org/vuls/id/MAPG-8D9M5Q
 CVE-2011-0410 (CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for ...)
 	NOT-FOR-US: CollabNet ScrumWorks Basic 
 CVE-2011-0409